X-Git-Url: https://git.openstreetmap.org/chef.git/blobdiff_plain/20e6d4524062198d6521c5e692e73c57984a322a..0f3cdcb49d8f3e8e1eedc01800aeeb51bfd34ff3:/cookbooks/tilecache/recipes/default.rb diff --git a/cookbooks/tilecache/recipes/default.rb b/cookbooks/tilecache/recipes/default.rb index b97ce12c8..f18896479 100644 --- a/cookbooks/tilecache/recipes/default.rb +++ b/cookbooks/tilecache/recipes/default.rb @@ -33,9 +33,14 @@ end package "xz-utils" package "openssl" +# oathtool for QoS token +package "oathtool" + tilecaches = search(:node, "roles:tilecache").sort_by { |n| n[:hostname] } tilerenders = search(:node, "roles:tile").sort_by { |n| n[:hostname] } +web_passwords = data_bag_item("web", "passwords") + tilecaches.each do |cache| cache.ipaddresses(:family => :inet, :role => :external).sort.each do |address| firewall_rule "accept-squid" do @@ -93,6 +98,27 @@ nginx_site "tile-ssl" do variables :certificate => certificate, :resolvers => resolvers, :caches => tilecaches end +template "/usr/local/bin/nginx_generate_tilecache_qos_map" do + source "nginx_generate_tilecache_qos_map.erb" + owner "root" + group "root" + mode 0o750 + variables :web_passwords => web_passwords +end + +template "/etc/cron.d/tilecache" do + source "cron.erb" + owner "root" + group "root" + mode 0o644 +end + +execute "execute_nginx_generate_tilecache_qos_map" do + command "/usr/local/bin/nginx_generate_tilecache_qos_map" + creates "/etc/nginx/conf.d/tile_qos_rates.map" + action :run +end + service "nginx-certificate-restart" do service_name "nginx" action :nothing